CVE-2018-10350 | BDVDB-2026-101163 Detail

Trend MicroTrend Micro Smart Protection Server (Standalone)

Description#

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.zerodayinitiative.com/advisories/ZDI-18-421/
https://success.trendmicro.com/solution/1119715

Exploit#

No public exploit known

History#

Version 12018-05-25Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.